$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft File: KYEeHbBovbur-3q2lfhYmL1hjGk.mft (raw, json) Hash identifier: sgJT7qYXThty5hTkBT7SPHxVRrPCqFFy1cqsjjb3HP0= Subject key identifier: BF:D4:99:69:08:B7:FE:6F:2C:6F:E5:29:AE:E1:83:07:81:BC:8D:15 Authority key identifier: 29:81:1E:1D:B0:68:BD:BB:AB:FB:7A:B6:95:F8:58:98:BD:61:8C:69 Certificate issuer: /CN=A91B0CAE/serialNumber=29811E1DB068BDBBABFB7AB695F85898BD618C69 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft Manifest number: D4 Signing time: Sat 23 Nov 2024 03:46:16 +0000 Manifest this update: Sat 23 Nov 2024 03:46:15 +0000 Manifest next update: Sat 30 Nov 2024 03:46:15 +0000 Files and hashes: 1: KYEeHbBovbur-3q2lfhYmL1hjGk.crl (hash: YThe2OLWZUFwOIq2HkNAKzFzfEoO84AUIC9lL0idgYw=) 2: 0B2052EA6D0D11EEA65D7522C4F9AE02.roa (hash: romYbuiWzdOqklzJCkUsUwW/w4kh63Rd2xMFubLjgPo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.crl rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0CAE/serialNumber=29811E1DB068BDBBABFB7AB695F85898BD618C69 Validity Not Before: Nov 23 03:46:15 2024 GMT Not After : Nov 30 03:46:15 2024 GMT Subject: CN=67415007-737c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b5:09:b1:fd:9e:40:bf:68:be:dd:a6:d9:b5: 7c:9e:cb:d1:70:c3:8b:e7:a4:b6:34:86:fe:87:ae: 70:62:06:63:e0:6d:a0:0b:2d:1b:3d:6b:64:24:ed: 66:9b:47:87:43:1b:00:c3:8c:d4:33:32:74:14:29: 5f:29:a3:34:ac:d5:50:2d:64:77:af:ef:d9:43:14: 39:a7:7f:cb:c5:f6:cb:32:69:77:60:fa:4f:e3:f9: d5:54:26:df:ff:81:a9:76:db:fd:32:02:9f:73:24: 31:b4:86:ce:f6:bc:31:87:e2:2d:3f:99:ea:31:de: 15:0d:f8:c0:ee:11:8c:9c:98:92:33:b6:01:e2:f3: ba:60:61:3b:10:a3:fe:91:aa:a4:4b:b8:45:4e:dd: 99:5d:5e:37:e3:40:a7:63:8f:e6:1d:e5:2d:55:60: c0:db:ed:5a:0d:6e:20:13:30:a9:39:e8:cd:35:b8: 43:85:bc:e4:cd:2f:5d:52:9b:82:4b:26:d3:6d:a9: 80:fc:aa:dd:f7:6a:e6:26:56:77:a0:65:60:ec:87: 13:b7:b3:a8:f9:28:8a:40:0c:7c:37:75:f7:b2:78: e8:eb:bb:25:2e:2d:63:66:a9:af:ee:25:07:b1:79: 43:4b:2e:e2:a3:0a:6e:31:09:6e:f2:20:bd:84:a6: 6b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D4:99:69:08:B7:FE:6F:2C:6F:E5:29:AE:E1:83:07:81:BC:8D:15 X509v3 Authority Key Identifier: keyid:29:81:1E:1D:B0:68:BD:BB:AB:FB:7A:B6:95:F8:58:98:BD:61:8C:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:df:62:e2:00:a7:b5:2d:81:f6:f7:9f:d7:7d:44:03:b0:b4: 8d:d9:6b:78:21:e0:23:12:70:53:06:df:b0:b7:a7:39:1b:6b: 40:f5:ba:83:87:2c:39:50:ca:14:cc:d9:81:90:ba:06:98:96: 89:89:56:52:b2:d3:0e:e5:9d:49:d6:bc:de:0c:3a:7f:ce:62: 4c:58:9e:4b:9e:12:d7:42:38:aa:c0:20:ef:fd:cd:33:bf:66: de:b7:0a:5e:b8:d7:ec:04:83:e4:c5:fb:1e:4e:d2:0e:0b:13: d5:d1:ba:ec:6c:60:8f:38:65:28:de:48:76:04:43:83:37:52: 44:58:7c:3c:80:fe:89:17:7b:fd:a4:09:bc:4c:9d:27:98:f0: 5f:61:7c:74:ab:8a:90:6b:25:19:49:4d:5a:68:bd:24:dd:d0: e4:49:0b:bc:0e:3c:77:5d:ae:6d:87:e0:85:38:9c:2b:11:30: 09:05:d5:6f:31:94:aa:29:1f:78:0a:fa:cb:54:ef:c3:a5:a6: 18:68:c4:9b:38:26:d0:8d:8b:66:fc:19:f4:46:33:9d:46:82: 3a:0e:46:f9:cd:cf:20:16:f7:b8:51:5b:a0:6a:94:7b:98:b5: c5:09:2e:5c:ef:cc:ee:a7:5b:42:88:f3:a8:e9:ae:68:ca:2b: a2:89:c8:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBDQUUxMTAvBgNVBAUTKDI5ODExRTFEQjA2OEJEQkJBQkZCN0FCNjk1Rjg1ODk4 QkQ2MThDNjkwHhcNMjQxMTIzMDM0NjE1WhcNMjQxMTMwMDM0NjE1WjAYMRYwFAYD VQQDEw02NzQxNTAwNy03MzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLUJsf2eQL9ovt2m2bV8nsvRcMOL56S2NIb+h65wYgZj4G2gCy0bPWtkJO1m m0eHQxsAw4zUMzJ0FClfKaM0rNVQLWR3r+/ZQxQ5p3/LxfbLMml3YPpP4/nVVCbf /4Gpdtv9MgKfcyQxtIbO9rwxh+ItP5nqMd4VDfjA7hGMnJiSM7YB4vO6YGE7EKP+ kaqkS7hFTt2ZXV4340CnY4/mHeUtVWDA2+1aDW4gEzCpOejNNbhDhbzkzS9dUpuC SybTbamA/Krd92rmJlZ3oGVg7IcTt7Oo+SiKQAx8N3X3snjo67slLi1jZqmv7iUH sXlDSy7iowpuMQlu8iC9hKZrDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL/UmWkI t/5vLG/lKa7hgweBvI0VMB8GA1UdIwQYMBaAFCmBHh2waL27q/t6tpX4WJi9YYxp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMENBRS83QzY0NEVFNjZB NzExMUVFQTVCNENCMjZDNEY5QUUwMi9LWUVlSGJCb3ZidXItM3EybGZoWW1MMWhq R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tZRWVIYkJvdmJ1ci0zcTJsZmhZbUwxaGpHay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MENBRS83QzY0NEVFNjZBNzExMUVFQTVCNENCMjZDNEY5QUUwMi9LWUVlSGJCb3Zi dXItM3EybGZoWW1MMWhqR2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBg32LiAKe1LYH295/XfUQDsLSN2Wt4IeAjEnBTBt+wt6c5G2tA9bqD hyw5UMoUzNmBkLoGmJaJiVZSstMO5Z1J1rzeDDp/zmJMWJ5LnhLXQjiqwCDv/c0z v2betwpeuNfsBIPkxfseTtIOCxPV0brsbGCPOGUo3kh2BEODN1JEWHw8gP6JF3v9 pAm8TJ0nmPBfYXx0q4qQayUZSU1aaL0k3dDkSQu8Djx3Xa5th+CFOJwrETAJBdVv MZSqKR94CvrLVO/DpaYYaMSbOCbQjYtm/Bn0RjOdRoI6Dkb5zc8gFve4UVugapR7 mLXFCS5c78zup1tCiPOo6a5oyiuiicjc -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:55 2024 by rpki-client on console-fra.rpki-client.org